v1.43.0
- Security: Bump pillow to 12.2.0 to address CVE-2026-25990 (out-of-bounds write when loading PSD images); unblocks installs in environments that gate on the older pinned version
- Shell: Fix missing visual spacing in the shell UI — add blank lines after user input echoes, content blocks, tool call results, notifications, error panels, and steer inputs so consecutive elements no longer collapse together
- Shell: Restore markdown link highlighting (bright blue underlined text and cyan underlined URLs) and add underline separators to h2-h6 headings; adjust table rendering to use square box borders with visible edges
- Core: Include completion timestamp and elapsed duration in background task terminal notifications, and add
finished_atandduration_sto the notification payload for easier tracking - MCP: Stop FastMCP OAuth startup from printing Authlib deprecation warnings by upgrading the MCP client stack to FastMCP 3.2.4
- MCP: Store OAuth MCP tokens in
~/.kimi/mcp-oauth/using FastMCP 3's persistent storage API; users with existing OAuth MCP authorizations may need to runkimi mcp auth <name>once after upgrading
Fetched June 4, 2026


